--- title: "GitHub AI agent leaks private repositories via prompt injection attack" url: https://daily.dev/posts/github-ai-agent-leaks-private-repositories-via-prompt-injection-attack-ffq6gdzd6 source_url: https://www.infoworld.com/article/4194468/github-ai-agent-leaks-private-repositories-via-prompt-injection-attack-2.html type: article source: "InfoWorld" published: 2026-07-08T12:19:52.757Z updated: 2026-07-08T12:20:27.230Z tags: ["security", "github", "ai-agents", "prompt-injection"] reading_time: 4 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub AI agent leaks private repositories via prompt injection attack **[InfoWorld](https://daily.dev/sources/infoworld)** · 4 min read · 0 upvotes · 0 comments ## Summary Security researchers at Noma Security discovered a prompt injection attack called GitLost that can trick GitHub's preview Agentic Workflows into leaking private repository contents publicly. An unauthenticated attacker submits a crafted GitHub Issue to a public repo; if the AI agent has read access to private repositories in the same organization, it retrieves and posts sensitive data in a public comment. The attack bypassed GitHub's prompt-based guardrails with minor wording changes and required no stolen credentials or malware. Experts highlight a deeper architectural problem: AI agents operate on broad service account permissions rather than user-scoped permissions, creating invisible trust boundary gaps. Recommended mitigations include explicit repository whitelists, treating all user inputs as untrusted before reaching the LLM, and having an emergency kill-switch for rogue agents. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [GitHub AI agent leaks private repositories via prompt injection attack](https://daily.dev/posts/github-ai-agent-leaks-private-repositories-via-prompt-injection-attack-rd9immbqn) · CSO Online · 0 upvotes · 0 comments - [GitLost: GitHub's AI agent leaks private repos when asked](https://daily.dev/posts/gitlost-github-s-ai-agent-leaks-private-repos-when-asked-qlzfcubqe) · The Next Web · 2 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#ai-agents](https://daily.dev/tags/ai-agents), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/github-ai-agent-leaks-private-repositories-via-prompt-injection-attack-ffq6gdzd6)